CVE-2023-42843

Published: Feb 21, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.

Affected (9)

Products: Apple: Ipad Os, Iphone Os, Macos, Safari · Fedoraproject: Fedora · Webkitgtk: Webkitgtk · +1 more

Show all products

Apple: Ipad Os, Iphone Os, Macos, Safari · Fedoraproject: Fedora · Webkitgtk: Webkitgtk · Wpewebkit: Wpe Webkit

4 products

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipad Os	Before 16.7.2
Apple Ipad Os	From 17.0 to 17.1
Apple Iphone Os	Before 16.7.2
Apple Iphone Os	From 17.0 to 17.1
Apple Macos	Version 14.0
Apple Safari	Before 17.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 40

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Webkitgtk Webkitgtk	Before 2.44.0
Wpewebkit Wpe Webkit	Before 2.44.0

Related CWEs

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (12)

http://www.openwall.com/lists/oss-security/2024/03/26/1

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/

Source: product-security@apple.com

Mailing List

https://support.apple.com/en-us/HT213981

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213982

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213984

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213986

Source: product-security@apple.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2024/03/26/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://support.apple.com/en-us/HT213981

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT213982

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT213984

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT213986

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.